Data Protection

Data Protection Notice

We manage our websites according to the principles regulated below:

We undertake to comply with the legal provisions on data protection and strive to always take into account the principles of data avoidance and data minimization.

1. name and address of the responsible person and the data protection officer

a) The responsible person

The responsible person within the meaning of the General Data Protection Regulation and other national data protection laws of the member states of the European Union as well as other data protection regulations is:

Open Beatz Festival GmbH
An der Römerstraße 18
89331 Burgau
Deutschland
E-Mail: office@openbeatz.de
Webseite: https://openbeatz.de

b) The data protection officer

You can reach the data protection officer of the responsible party as follows:

Florian Gebauer, An der Römerstraße 18 89331 Burgau, office@openbeatz.de

2. explanations of terms

We have designed our data protection declaration according to the principles of clarity and transparency. However, if there are any ambiguities regarding the use of various terms, the relevant definitions can be found here.

3. legal basis for the processing of data

a) Processing of personal data according to the GDPR.

We process your personal data, such as your surname and first name, your e-mail address and IP address, etc., only if there is a legal basis for doing so. Here, according to the General Data Protection Regulation, the following regulations in particular come into consideration:

• Art. 6 para. 1 p. 1 lit. a DSGVO: The data subject has given his/her consent to the processing of personal data relating to him/her for one or more specific purposes.

• Art. 6 (1) p. 1 lit. b DSGVO: Processing is necessary for the performance of a contract to which the data subject is party or for the performance of pre-contractual measures taken at the data subject’s request.

• Art. 6 para. 1 sentence 1 lit. c DSGVO: Processing is necessary for compliance with a legal obligation to which the controller is subject.

• Art. 6 para. 1 p. 1 lit. d DSGVO: Processing is necessary to protect the vital interests of the data subject or another natural person

• Art. 6 (1) p. 1 lit. e DSGVO: processing is necessary for the performance of a task carried out in the public interest or in the exercise of official authority vested in the controller

• Art. 6 (1) p. 1 lit. f DSGVO: processing is necessary for the purposes of protecting the legitimate interests of the controller or a third party, except where such interests are overridden by the interests or fundamental rights and freedoms of the data subject which require the protection of personal data, in particular where the data subject is a child.

However, we will always point out to you again at the respective points in this privacy policy on which legal basis the processing of your personal data takes place.

b) Consent of the legal guardian according to Art. 8 para.1 p.2 alt.2 DSGVO

A custodian must consent to all data processing within the scope of this website for which the consent of a minor who has not yet reached the age of 16 is required.

Information on the individual data processing operations, their purposes and the categories of data concerned, for which the consent of the person concerned is required, can be found in the data protection declaration.

You may revoke your consent at any time by sending the revocation notice in text form to the contact details of the controller. The processing remains lawful until the revocation.

c) Processing of information according to § 25 Abs.1 TTDSG.

We also process information pursuant to § 25 Abs.1 TTDSG by storing information on your terminal equipment or accessing information that is already stored on your terminal equipment. This can be both personal information and non-personal data, e.g. cookies, browser fingerprints, advertising IDs, MAC addresses and IMEI numbers. Terminal equipment in this context is any device connected directly or indirectly to the interface of a public telecommunications network for the purpose of sending, processing or receiving messages, § 2 para.2 no.6 TTDSG.

As a rule, we process this information on the basis of your consent, Section 25 (1) TTDSG.

As far as an exception according to § 25 Abs.2 Nr.1 und Nr.2 TTDSG is given, we do not need your consent. Such an exception is given if we exclusively access or store the information in order to transmit a message via a public telecommunication network or if this is absolutely necessary so that we can provide a telemedia service expressly requested by you. You may revoke your consent at any time.

We inform you that the revocation of consent does not affect the lawfulness of the processing carried out on the basis of the consent up to the revocation.Wir weisen Sie aber an den jeweiligen Stellen dieser Datenschutzerklärung immer noch einmal darauf hin, auf welcher Rechtsgrundlage die Verarbeitung Ihrer personenbezogenen Daten erfolgt.

4. passing on of personal data

The passing on of personal data is also processing in the sense of the previous point 3. However, at this point we would like to inform you again separately about the subject of passing on to third parties. The protection of your personal data is very important to us. For this reason, we are particularly careful when it comes to passing on your data to third parties.

We therefore only pass on data to third parties if there is a legal basis for the processing. For example, we share personal data with individuals or companies that act as processors for us in accordance with Article 28 of the GDPR. A processor is anyone who processes personal data on our behalf – i.e., in particular, in a relationship of instruction and control with us

In accordance with the requirements of the DSGVO, we conclude a contract with each of our order processors to oblige them to comply with data protection regulations and thus provide your data with comprehensive protection.

5. storage period and deletion

Your personal data will be deleted by us if it is no longer necessary for the purposes for which it was collected or otherwise processed, the processing is not necessary for the exercise of the right to freedom of expression and information, for compliance with a legal obligation, for reasons of public interest or for the assertion, exercise or defense of legal claims.

6. SSL or TLS Encryption

This website uses SSL or TLS encryption for security reasons and to protect the transmission of confidential content, such as requests that you send to us as the website operator. You can recognize an encrypted connection by the fact that the address line of the browser changes from “http://” to “https://” and by the lock symbol in your browser line.

If SSL or TLS encryption is activated, the data that you transmit to us cannot be read by third parties.

7. Cookies

We use cookies on our website. Cookies are small data packages that are automatically created by your browser and stored on your terminal device when you visit our website. These cookies are used to store information in connection with the respective end device used.

When cookies are used, a distinction is made between technically necessary cookies and “other” cookies. Technically necessary cookies are given when they are absolutely necessary.

a) Technically necessary cookies

In order to make the use of our offer more pleasant for you, we use technically necessary cookies, which may be so-called session cookies (e.g. language and font selection, shopping cart, etc.), content cookies, cookies to ensure server stability and security, or similar. The legal basis for the cookies results from Art. 6 para. 1 p. 1 lit. f) DSGVO, our legitimate interest in the error-free operation of the website and the interest in providing you with our services optimized.

b) Further cookies

Other cookies include cookies for statistical purposes, analysis and marketing and retargeting purposes. We use these cookies for you based on your consent pursuant to Art. 6 para. 1 p. 1 lit. a) DSGVO.

You can revoke your consent for the use of cookies at any time. We inform you that the revocation of consent does not affect the lawfulness of the processing carried out on the basis of the consent until the revocation.

To do this, you can either edit your cookie settings on our website, deactivate the use of cookies in your browser settings (whereby this may also restrict the functionality of the online offer) or set an opt-out for the relevant service in individual cases.

For the respective services, we point out within the data protection declaration on which legal basis the cookies are used.COOKIE-EINSTELLUNGEN ÄNDERN

8. Cookie-Banner

To obtain consent for the cookies we use, we use a cookie banner. This itself sets a so-called consent cookie to query and process the respective consent status. This consent cookie is technically necessary and is therefore used based on our legitimate interest pursuant to Art. 6 para.1 p.1 lit. f DSGVO, § 25 para.1 TTDSG.

9. collection and storage of personal data as well as their type and purpose of use

a) External hosting

Our website is hosted by All-Ink (ALL-INKL.COM – Neue Medien Münnich, Hauptstraße 68, 02742 Friedersdor). For this reason, all personal data collected on our website is stored on the servers of our hoster, unless an external service of a third party is integrated. This may be the IP address, your e-mail address, communication data or similar. You can find out what specific personal data is involved in the individual functions and services explained by us below. If we use an external service of a third party, this will be made clear in the description of the respective service or tool.

The hoster processes your data only on our instructions and to the extent necessary to fulfill the services on the website. The hoster does not process the data for its own purposes. We have concluded an order processing contract with this.

b) When visiting the website

When you visit our website, the browser used on your terminal device automatically sends information to the server of our website. This information is temporarily stored in a so-called log file. The following information is collected without your intervention and stored until automated deletion:

  • IP address of the requesting computer
  • Date and time of access
  • Name and URL of the accessed file
  • Website from which access was made (referrer URL)
  • browser used and, if applicable, the operating system of your computer as well as the name of your access provider.

The aforementioned data is processed by us for the following purposes:

  • Ensuring a smooth connection setup of the website
  • Ensuring a comfortable use of our website
  • Evaluation of system security and stability
  • error analysis
  • for further administrative purposes

Data that allow a conclusion to your person, such as the IP address, will be deleted after 7 days at the latest. If we store the data beyond this period, this data will be pseudonymized so that an assignment to you is no longer possible.

The legal basis for the data processing is Art. 6 para. 1 p. 1 lit. f DSGVO. Our legitimate interest follows from the purposes for data collection listed above. In no case do we use the collected data for the purpose of drawing conclusions about your person.

c) Contractual relationship

(1) Ticket orders

On our website, we offer you the opportunity to purchase a ticket for our event online. Within the framework of the establishment of the contractual relationship, only the personal data that is absolutely necessary for the performance of the contract will be processed in accordance with Art. 6 (1) p. 1 lit. b DSGVO. If you provide additional voluntary information, this will only be processed on the basis of your consent pursuant to Art. 6 para. 1 p. 1 lit a DSGVO . We use this voluntary information to offer a customer-friendly service and to constantly improve it. We use the service provider TicketPAY Europe GmbH, Neue Bahnhofstraße 1-3, 59065 Hamm, Germany, to sell our tickets and process the ticket purchase. We have concluded an order processing agreement with this service provider in accordance with Art. 28 Para.3 DSGVO. For further information on data processing by TicketPAY Europe GmbH, please visit https://manage.ticketpay.de/documents/agb/tpeu_privacy_de.pdf.

d) Newsletter

Content of the newsletter and registration data

The sending of our newsletter and the performance of statistical surveys and analyses as well as logging of the registration process will only take place if you order it from us and have given your corresponding consent in accordance with Art. 6 para. 1 p. 1 lit. a DSGVO, § 25 para.1 TTDSG. The contents of the newsletter will be specifically described when you register for the newsletter. For the registration of the newsletter, it is sufficient to provide your e-mail address. If you provide further voluntary information, such as your name and/or gender, this will be used exclusively for the personalization of the newsletter addressed to you.

Double opt-in and logging

For security reasons, we use the so-called double opt-in procedure to register for our newsletter so that no one can register with other people’s e-mail addresses. Therefore, after you have registered for our newsletter, you will first receive an e-mail asking you to confirm your registration. Only with the confirmation of the registration it becomes effective.

Furthermore, your registration for the newsletter is logged. The logging includes the storage of the registration and confirmation time, your specified data and your IP address. If you make changes to your data, these changes will also be logged.

Revocation

If you no longer wish to receive our newsletter, you can revoke your consent at any time for the future. To do so, you can click on the unsubscribe link at the end of each newsletter or send us an e-mail to the following e-mail address: office@openbeatz.de.

The revocation of consent does not affect the lawfulness of the processing carried out on the basis of the consent until the revocation.

Use of Brevo

We use the e-mail tool Brevo (former Sendinblue) (Sendinblue GmbH Köpenicker Straße 126, 10179 Berlin) to send our newsletter.

For this purpose, the data you provide is passed on to Brevo and processed by it. Via this tool we have the possibility to evaluate how the newsletters are opened and used.

We have concluded the standard contractual clauses with Brevo. Brevo does not obtain the right to pass on your data.

You can find more information about Brevo´s data protection here.

e) Contact form

We provide a form on our website so that you have the opportunity to contact us at any time. For the use of the contact form, it is necessary to provide a name for a personal salutation and a valid e-mail address to contact us, so that we know from whom the request comes and can also process it.

If you send us inquiries via the contact form, the information you provide in the inquiry form, including the contact data you provide there, as well as your IP address, will be processed in accordance with Art. 6 (1) p. 1 lit. b and f DSGVO for the purpose of carrying out pre-contractual measures that take place in response to your inquiry or for the exercise of our legitimate interest, namely to carry out our business activities.

The inquiries as well as the associated data will be deleted no later than 3 months after receipt, unless they are required for a further contractual relationship.

f) Form for press accreditation and press inquiries

We provide a form on our website that you can use for accreditations and press inquiries. In order to use the form, it is necessary to enter a first and last name for a personal salutation and a valid e-mail address and telephone number for contacting us, so that we know who the inquiry is from and can process it.

If you send us inquiries via this, your data from the inquiry form, including the contact data you provide there, as well as your IP address, will be processed in accordance with Art. 6 (1) p. 1 lit. b and f DSGVO for the purpose of carrying out pre-contractual measures that take place in response to your inquiry or for the exercise of our legitimate interest, namely to carry out our business activities.

The inquiries as well as the associated data will be deleted no later than 3 months after receipt, unless they are required for a further contractual relationship.

g) Application form

We provide a form on our website that you can use to apply for a job with us. Your personal data from the application will be processed in accordance with our data protection instructions for applicants.

The use of this form is based on our legitimate interest in easy and secure transmission of your application documents, Art. 6 para. 1 p. 1 lit. f) DSGVO.

h) Use of Google Maps

Our website uses the Google Maps API. By using Google Maps, information about your use of this website (including your IP address) may be transmitted to and stored by Google on servers in the United States (Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland).

Google may transfer the information obtained through Maps to third parties if this is required by law or if third parties process this data on behalf of Google. However, your IP address will under no circumstances be associated with other data from Google. Nevertheless, we must point out that it would be technically quite possible for Google to identify individual users on the basis of the data received.

We have no influence on whether your personal data and personality profiles are processed by Google for other purposes. If you want to avoid this at all costs, then you can deactivate the Google Maps service and thus prevent the transfer of data to Google. To do this, you only need to deactivate JavaScript in your browser. In this case, no data will be transferred, but you will also no longer be able to use the map display on our website.

You can find the Google privacy policy here.

Through the integration of Google Maps, the Google Fonts are also dynamically reloaded by Google, without this being actively determined by the website operator or visitor. The integration of these web fonts takes place through a server call, usually a Google server in the USA. Through this, the following may be transmitted to the server and stored by Google:

  • Name and version of the browser used
  • Website from which the request was initiated (referrer URL)
  • Operating system of your computer
  • Screen resolution of your computer
  • IP address of requesting computer
  • Language settings of the browser or operating system used by the user

You can find more detailed information in Google’s privacy policy, which you can access here:

www.google.com/fonts#AboutPlace:about
www.google.com/policies/privacy/

The use of Google Maps represents a service for you, so that you can recognize our location exactly and if necessary plan your visit with us better. The use of Google Maps is based on your consent pursuant to Art. 6 para. 1 p. 1 lit. a DSGVO.

i) Google Tag Manager

We use the Google Tag Manager from Google (Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland) on our website. The Google Tag Manager is an administration and management tool in which other tracking and/or statistics tools can be centrally managed and played out.

When you visit our website and give your consent in accordance with Art. 6 para.1 p.1 lit. a) DSGVO, the Google Tag Manager collects and processes your IP address, which may also be transferred to the USA. However, the Google Tag Manager itself does not create a user profile or analyses.

The Google privacy policy can be found hier.

10. analysis and tracking tools

We use the analysis and tracking tools listed below on our website. These are used to ensure the ongoing optimization of our website and to design it to meet your needs.

We use these tools on the basis of your consent pursuant to Art. 6 (1) p. 1 lit. a DSGVO. You can revoke your consent at any time by changing the cookie settings. The processing remains lawful until the revocation.

The respective data processing purposes and data categories can be found in the corresponding tools. We point out that we have no influence on whether and to what extent the service providers carry out further data processing.

a) Google Analytics

We use Google Analytics on our website, a web analytics service provided by Google (Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland, hereinafter “Google”). Google Analytics uses cookies in this context (see section 7). The information generated by the cookie about your use of this website, such as

  • Name and version of the browser used
  • Operating system of your computer
  • Website from which the access is made (referrer URL)
  • IP address of the requesting computer
  • Time of the server request

are usually transferred to a Google server in the USA and stored there.

Your IP address is automatically anonymized by Google before it is recorded via EU domains and servers. Therefore, there is no logging or storage of your IP address.

On our behalf, Google will use this information for the purpose of evaluating your use of our website, compiling reports on website activity and providing other services relating to website activity and internet usage to us. The IP address transmitted by your browser within the scope of Google Analytics will not be combined with other Google data.

We have concluded an order processing agreement with Google.

Please click here for an overview of data protection at Google.

b) Facebook Conversion Pixel

We use the “conversion pixel” or visitor action pixel of Meta Platforms Ireland Ltd (4 Grand Canal Square, Grand Canal Harbour, Dublin 2 Ireland). By calling up this pixel from your browser, Meta Platforms can subsequently recognize whether a Facebook ad was successful, e.g. led to an online purchase.

We only receive statistical data from Meta Platforms for this purpose without any reference to a specific person. This allows us to record the effectiveness of the Facebook ads for statistical and market research purposes. In particular, if you are logged into Facebook, we refer you to their privacy information https://www.facebook.com/about/privacy/.

c) TikTok Pixel

We use on our website the TikTok Pixel of TikTok Technology Limited (10 Earlsfort Terrace, Dublin, D02 T380, Ireland) and TikTok Information Technologies UK Limited (WeWork, 125 Kingsway, London, WC2B 6NH, United Kingdom), which act as joint controllers in the European area.

The TikTok Pixel is a TikTok advertiser tool. It is a JavaScript code snippet that allows us to see and track visitors’ activity on our website. For this purpose, information about visitors to our website and the devices they use (so-called event data) is collected and processed.

The purpose of processing this Event Data is, for example, to target our advertisements, improve ad delivery and personalize advertising. This event data is transmitted to TikTok.When collecting and transmitting the Event Data, we act as joint controllers with TikTok. For this reason, we have reached an agreement with TikTok on processing as joint controllers. In terms of the agreements reached, we are responsible for providing you with all information pursuant to Articles 13 and 14 of the GDPR regarding the joint processing of personal data. TikTok, in turn, is responsible for ensuring that data subjects can exercise their rights under Articles 15 to 20 of the GDPR.

You can access the agreement concluded between us and TikTok at https://ads.tiktok.com/i18n/official/policy/jurisdiction-specific-terms.

TikTok is the sole controller for the processing that immediately follows the transfer of the Event Data. For more information about how TikTok processes personal data, including the legal basis on which TikTok relies and how you can exercise your rights against TikTok, please see TikTok’s Data Policy at https://www.tiktok.com/legal/privacy-policy?lang=de-DE.

11. Social Media

On our website, the social media plugins listed below are used to make our website better known via this. The legal basis for the use of the social media plugins results from your consent pursuant to Art. 6 para. 1 p. 1 lit. a DSGVO.

The responsibility for data protection-compliant operation is to be ensured by their respective providers.

a) Facebook-Plugin „Gefällt mir“

The Facebook “Like” plugin is integrated into this website. You can recognize it by the blue Facebook logo and the adjacent addition “Like”. The plugin is operated by Meta Platforms Ireland Limited (Hanover Reach, 5-7 Hanover Quay, Dublin 2 Ireland) and is directly connected to the servers of Meta Platforms. No data is passed on to the website operator.

As soon as you activate the plugin, it collects, uses and transmits data to Meta Platforms – independently of this website – to the extent and for the purpose stated in Facebook’s privacy policy at http://www.facebook.com/policy.php (including the information that and when you visited this website). If you actively use the plugin (e.g. by clicking the “Like” button), this information is also transmitted to Meta Platforms and used there.

The type, scope and purpose of the data collected depend on whether you are registered and/or logged in to Facebook. However, data is only assigned to your Facebook account if you are currently logged in to Facebook. This means that you should log out of Facebook before visiting this website if you want to prevent an assignment to your Facebook profile. Meta Platforms may also process the collected data in the following ways. The most frequently asked questions about the plugin’s data protection are explained in general terms at https://www.facebook.com/help.php?page=1068

b) Instagram

We use functions of the Instagram service on our websites, which is operated by Meta Platforms Ireland Ltd (Meta Platforms Ireland Limited, 4 Grand Canal Square, Dublin 2, Ireland).

If you click on the Instagram button on our website, the content of our website will be linked to your Instagram profile. However, this is only possible if you are logged into your Instagram account.

We would like to point out that, as the provider of the website, we have no knowledge of the content of the transmitted data or its use by Instagram.

You can find more information on this in Instagram’s privacy policy: https://instagram.com/about/legal/privacy/

c) TikTok

On our websites, we use functions of the TikToK service of TikTok Technology Limited (10 Earlsfort Terrace, Dublin, D02 T380, Ireland) and TikTok Information Technologies UK Limited (WeWork, 125 Kingsway, London, WC2B 6NH, United Kingdom), which act as joint controllers in the European area. If you click on the TikTok button on our website, the content of our website will be linked to your TikTok profile. However, this is only possible if you are logged into your TikTok account.

We would like to point out that, as the provider of the website, we have no knowledge of the content of the transmitted data or its use by TikTok.

Further information on this can be found in TikTok’s privacy policy: https://www.tiktok.com/legal/privacy-policy?lang=de-DE.

12. image, sound and video integration

YouTube

Our website uses the YouTube plugin, which is operated by Google (Google Ireland Limited, Gordon House, Barrow Street, Dublin 4, Ireland).

If you activate the YouTube plugin during your visit, a connection to the YouTube servers is established and the YouTube server is informed which of our pages you have visited. This allows YouTube to associate your surfing behaviour directly with your personal profile. You can prevent this by logging out of your member account before visiting our website.

Further information on the handling of user data can be found in YouTube’s privacy policy at: https://www.google.de/intl/de/policies/privacy

By integrating YouTube, Google Fonts are also dynamically reloaded by Google without the website operator or visitor having to actively determine this. These web fonts are integrated by a server call, usually a Google server in the USA. This may result in the following being transmitted to the server and stored by Google

  • Website from which the request was triggered (referrer URL)
  • Name and version of the browser used
  • Operating system of your computer
  • Screen resolution of your computer
  • IP address request
  • Language settings of the browser or operating system used by the user

Further information can be found in Google’s privacy policy, which you can access here:
www.google.com/fonts#AboutPlace:about
www.google.com/policies/privacy/

The legal basis results from the consent you have given in accordance with Art. 6 para. 1 sentence 1 lit. a GDPR. You can revoke your consent at any time by changing the cookie settings on our website.

CHANGE COOKIE SETTINGS

13. rights of the data subject

You have the following rights

a) Information

In accordance with Art. 15 GDPR, you have the right to request information about your personal data processed by us. This right to information includes information about

  • the purposes of processing
  • the categories of personal data
  • the recipients or categories of recipients to whom your data has been or will be disclosed
  • the planned storage period or at least the criteria for determining the storage period
  • the existence of a right to rectification, erasure, restriction of processing or objection
  • the existence of a right to lodge a complaint with a supervisory authority
  • the origin of your personal data if it was not collected by us the existence of automated decision-making, including profiling and, where applicable, meaningful information about its details

b) Rectification

In accordance with Art. 16 GDPR, you have the right to obtain from us without undue delay the rectification of inaccurate or incomplete personal data stored by us.

c) Erasure

In accordance with Art. 17 GDPR, you have the right to demand that we erase your personal data without undue delay, unless further processing is necessary for one of the following reasons

  • the personal data are still necessary for the purposes for which they were collected or otherwise processed
  • to exercise the right to freedom of expression and information
  • for compliance with a legal obligation which requires processing by European Union or Member State law to which the controller is subject or for the performance of a task carried out in the public interest or in the exercise of official authority vested in the controller
  • for reasons of public interest in the area of public health in accordance with Art. 9 para. 2 lit. h and i and Art. 9 para. 3 GDPR
  • for archiving purposes in the public interest, scientific or historical research purposes or statistical purposes in accordance with Art. 89 para. 1 GDPR, insofar as the right referred to in section a) is likely to render impossible or seriously impair the achievement of the objectives of that processing
  • for the establishment, exercise or defence of legal claims

restriction of processing

In accordance with Art. 18 GDPR, you can request the restriction of the processing of your personal data

  • You contest the accuracy of your personal data.
  • The processing is unlawful and you oppose the erasure of the personal data.
  • We no longer need the personal data for the purposes of the processing, but they are required by you for the establishment, exercise or defence of legal claims.
  • You object to the processing pursuant to Art. 21 (1) GDPR.

e) notification

If you have requested the rectification or erasure of your personal data or a restriction of processing in accordance with Art. 16, Art. 17 or Art. 18 GDPR, we will inform all recipients to whom your personal data has been disclosed, unless this proves impossible or involves a disproportionate effort. You can request that we inform you of these recipients.

f) Transmission

You have the right to receive your personal data that you have provided to us in a structured, commonly used and machine-readable format. You also have the right to request the transfer of this data to a third party, provided that the processing is carried out using automated procedures and is based on consent pursuant to Art. 6 para. 1 sentence 1 lit. a or Art. 9 para. 2 lit. a or on a contract pursuant to Art. 6 para. 1 sentence 1 lit. b GDPR.

g) Revocation

In accordance with Art. 7 para. 3 GDPR, you have the right to revoke your consent to us at any time. The withdrawal of consent shall not affect the lawfulness of processing based on consent before its withdrawal. In future, we may no longer continue the data processing that was based on your withdrawn consent.

h) h) Complaint

In accordance with Art. 77 GDPR, you have the right to lodge a complaint with a supervisory authority if you believe that the processing of your personal data violates the GDPR.

i) Objection

If your personal data is processed on the basis of legitimate interests in accordance with Art. 6 para. 1 sentence 1 lit. f GDPR, you have the right to object to the processing of your personal data in accordance with Art. 21 GDPR, provided that there are reasons for this arising from your particular situation or the objection is directed against direct advertising. In the latter case, you have a general right to object, which will be implemented by us without specifying the particular situation. If you wish to exercise your right of cancellation or objection, simply send an email to office@openbeatz.de

j) Automated decision-making in individual cases, including profiling

You have the right not to be subject to a decision based solely on automated processing, including profiling, which produces legal effects concerning you or similarly significantly affects you. This does not apply if the decision

  • i. is necessary for the conclusion or fulfilment of a contract between you and us
  • ii. is authorised by European Union or Member State law to which we are subject and which also lays down suitable measures to safeguard your rights and freedoms and legitimate interests
  • iii. is made with your express consent

However, these decisions may not be based on special categories of personal data pursuant to Art. 9 para. 1 GDPR, unless Art. 9 para. 2 lit. a or g GDPR applies and appropriate measures have been taken to protect the rights and freedoms as well as your legitimate interests.

Regarding the cases referred to in i) and iii), we shall take reasonable measures to safeguard the rights and freedoms and your legitimate interests, including at least the right to obtain the intervention of a person on our part, to express your own position and to contest the decision.

14. image, sound and video recording

If you send us (Open Beatz Festival GmbH) image, sound or video recordings (e.g. via the ‘Media upload’ form), you authorise us to use the material for advertising purposes on our social media channels in full or in excerpts. You will not receive any remuneration for this unless explicitly agreed otherwise in writing before sending the file.

15. Changes to the privacy policy

If we change the privacy policy, this will be indicated on the website.

Status: 08.03.2023